Tib3rius

Episode 29: HackKorman!

Tib3rius & Andy Swift are joined by Zack Korman to talk about his podcast reviews, cybersecurity social media, and hacker conventions.

Links below!

Episode 28: War Stories with Garr_7!

Tib3rius & Andy Swift are joined by pentester and content creator Garr_7, who shares some web app war stories with us!

Links below!

Episode 27: A Year in Review

@tib3rius.bsky.social & @swiftsecur.bsky.social talk about their top Cybersecurity "happenings" of 2025, and reflect on their first year of podcasting together.

Links below!

i hAvEn'T sHoWeReD sInCe lAsT yEaR

0xTib3rius - Twitch Professional pentester since 2012, specializing in web app security since 2014. Developer of AutoRecon. Creator of Linux & Windows Privilege Escalation courses on Udemy & Hacker's Academy. Streaming mostly HTB/ THM boxes, plus Web Academy challenges.

Tech Talk!

www.twitch.tv/0xTib3...
www.twitch.tv/tracke...

Episode 26: (Christmas) War Stories with John Hammond!

@0xTib3rius & @SwiftSecur1 are joined by @johnhammond.bsky.social who shares some war stories in our first Christmas episode!

Links below!

This holiday season, instead of "Elf on the Shelf", why not...

Episode 25: Lockpicking Adventures!

@tib3rius.bsky.social & @swiftsecur.bsky.social talk about their lockpicking experiences, and why locksport is so popular in the Cybersecurity community.

Links below!

New video! Getting Into Cybersecurity - An Interview with @jun34u.bsky.social!

Jun34u, a hacker and Cult of the Dead Cow member shares her cybersecurity journey!

Watch now! youtu.be/BYOnnU22R-Y

OK but like, if you give thanks at Thanksgiving, am I expected to give friends at Friendsgiving?

What if I want to keep my friends?
What if they don't appreciate being handed over to someone they don't know?
😩

No.

There should be a Thanksgiving celebration but for friends instead of family.

We could call it something like Thanksfriending.

New video! I sat down with Skylar (@securityward.bsky.social) to dig into the Honeyman Project, a research experiment where devices are intentionally exposed at cons, coffee shops, and more to see who tries to hack them and how.

Watch now! youtu.be/PRvf1byGsXU

Episode 24: Security Researchers "vs." Open Source Software with solst/ICE!

@tib3rius.bsky.social & @swiftsecur.bsky.social are joined by Solst to talk about pain points between security researchers and open source software developers.

Links below!

I let Burp AI loose against a couple more web challenges over on Portswigger Web Academy: SSRF & SSTI

Watch how it does: youtu.be/eQBD2-k9V7s

New video! Proud to announce Collector, a powerful new extension for @burpsuite that provides solutions for the collection, tracking, and handling of any kind of "token".

Watch here: youtu.be/SsjlL1N1qgM

Try out Collector: github.com/Tib3rius/...

This Thursday (Nov 13) at 3pm ET I'll be part of a panel for the National Cyber League (NCL) Spirit Week: "From Passion to Profession: Cyber Career Journeys"

Some super cool people are taking part (and also I'm there).

Anyone can join the stream and watch! streamyard.com/watch...

Episode 23: War Stories with Brendan Dolan-Gavitt (XBOW)!

@tib3rius.bsky.social & @swiftsecur.bsky.social are joined by @moyix.net who shares some AI and human war stories with us!

Links below!

New video! Getting Into Cybersecurity - An Interview with Patrick Laverty!

Patrick Laverty, a pentester, social engineer, and conference organizer talks to Tib3rius about his career journey.

Watch now! youtu.be/k3Ir4D161Uk

Saw Bugonia tonight. Very good film. Watch the trailer, don't read any spoilers, trust me.

Learn WebApp Pentesting Live With Tib3rius and Ask Questions - YouTube Join this channel to get access to the perks:https://www.youtube.com/channel/UCYuizWN2ac4L7CZ-WWHZQKw/joinJoin my Discord community to learn and network with...

I'll be on Infosec Pat's channel in 45 min for some live hacking fun and Q&A!

Episode 22: Social Engineering, Gas Mark 4, and AGAs with Rachel Tobac!

@tib3rius.bsky.social & @swiftsecur.bsky.social are joined by @racheltobac.bsky.social to talk social engineering war stories...and more!

Links below!

So most of America. 😅

If you're coming to BurbSec East or BSides Chicago next week, come find me and grab one of these new stickers. 🔥

I vibe-coded a new Burp Suite extension using Claude Code, and you can too! Watch me set up Burp’s Claude starter project, build a working extension and let AI debug itself.

Watch now! youtu.be/83-kpDPHQag

New video! I tested out Burp AI against a freshly coded app to see what it could do. Explore Issue + Agentic mode in Repeater were particularly fun to use.

www.youtube.com/watc...

Thanks to @portswigger.net for sponsoring this video!

Insane is what it is. I'll make a video on it when it's done. It is 3 extension ideas I had rolled into one but in a logical way. It should really help with a lot of testing.

I've vibe-coded a Burp extension using Claude that I had in my head for a few years, and it only took a few hours.

What's worse is it actually works. Really well.

I feel dirty. 😭

Episode 21: The One Where They Talk About AI Again

@tib3rius.bsky.social & @swiftsecur.bsky.social talk about AI (again). How it affects our lives, vibe coding, and its increasing usefulness in Cybersecurity.

Links below!

Base64 is hands down my favorite way to encrypt stuff. So easy. 🔥